jsonlogic-validator
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
json-logic-jsNode.js package, a well-known and standard library for implementing JSONLogic. The instructions provide clear guidance for users to install this dependency locally via npm. - [PROMPT_INJECTION]: The skill facilitates the processing of JSONLogic rules and test data. While this creates an ingestion surface for external content, the risk is mitigated as the logic is processed through the JSONLogic DSL, which is specifically designed to be deterministic and lacks support for arbitrary code execution. The following evidence chain applies to this surface:
- Ingestion points: CLI arguments for rules and data in
scripts/test-jsonlogic.jsandscripts/validate-jsonlogic.js. - Boundary markers: Not present in the current script implementation.
- Capability inventory: The skill is limited to JSON parsing, logic evaluation via the
json-logic-jsengine, and local file reading for input. - Sanitization: Input strings are validated via
JSON.parsebefore processing. - [COMMAND_EXECUTION]: The skill includes Node.js scripts for validation and testing. These scripts perform safe operations such as argument parsing and JSON evaluation, with no evidence of unsafe subprocess spawning or command injection vulnerabilities.
Audit Metadata